'\" t
.\"     Title: probe::netfilter.arp.in
.\"    Author: 
.\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/>
.\"      Date: April 2024
.\"    Manual: Networking Tapset
.\"    Source: SystemTap Tapset Reference
.\"  Language: English
.\"
.TH "PROBE::NETFILTER\&.A" "3stap" "April 2024" "SystemTap Tapset Reference" "Networking Tapset"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
probe::netfilter.arp.in \- \- Called for each incoming ARP packet
.SH "SYNOPSIS"
.sp
.nf
netfilter\&.arp\&.in 
.fi
.SH "VALUES"
.PP
\fIarphdr\fR
.RS 4
Address of ARP header
.RE
.PP
\fIar_sha\fR
.RS 4
Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address
.RE
.PP
\fIar_op\fR
.RS 4
ARP opcode (command)
.RE
.PP
\fInf_repeat\fR
.RS 4
Constant used to signify a \*(Aqrepeat\*(Aq verdict
.RE
.PP
\fIar_tip\fR
.RS 4
Ethernet+IP only (ar_pro==0x800): target IP address
.RE
.PP
\fIlength\fR
.RS 4
The length of the packet buffer contents, in bytes
.RE
.PP
\fInf_drop\fR
.RS 4
Constant used to signify a \*(Aqdrop\*(Aq verdict
.RE
.PP
\fIindev_name\fR
.RS 4
Name of network device packet was received on (if known)
.RE
.PP
\fIdata_hex\fR
.RS 4
A hexadecimal string representing the packet buffer contents
.RE
.PP
\fInf_accept\fR
.RS 4
Constant used to signify an \*(Aqaccept\*(Aq verdict
.RE
.PP
\fIar_hrd\fR
.RS 4
Format of hardware address
.RE
.PP
\fInf_stolen\fR
.RS 4
Constant used to signify a \*(Aqstolen\*(Aq verdict
.RE
.PP
\fIar_pln\fR
.RS 4
Length of protocol address
.RE
.PP
\fIar_tha\fR
.RS 4
Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address
.RE
.PP
\fIar_sip\fR
.RS 4
Ethernet+IP only (ar_pro==0x800): source IP address
.RE
.PP
\fIpf\fR
.RS 4
Protocol family \-\- always
\(lqarp\(rq
.RE
.PP
\fIoutdev\fR
.RS 4
Address of net_device representing output device, 0 if unknown
.RE
.PP
\fIindev\fR
.RS 4
Address of net_device representing input device, 0 if unknown
.RE
.PP
\fIar_pro\fR
.RS 4
Format of protocol address
.RE
.PP
\fIoutdev_name\fR
.RS 4
Name of network device packet will be routed to (if known)
.RE
.PP
\fInf_queue\fR
.RS 4
Constant used to signify a \*(Aqqueue\*(Aq verdict
.RE
.PP
\fIar_data\fR
.RS 4
Address of ARP packet data region (after the header)
.RE
.PP
\fInf_stop\fR
.RS 4
Constant used to signify a \*(Aqstop\*(Aq verdict
.RE
.PP
\fIar_hln\fR
.RS 4
Length of hardware address
.RE
.PP
\fIdata_str\fR
.RS 4
A string representing the packet buffer contents
.RE
.SH SEE ALSO\n 
.IR tapset::netfilter (3stap)
